2016-09-22 20:47:43 +02:00
|
|
|
/*
|
|
|
|
|
luksrku - Tool to remotely unlock LUKS disks using TLS.
|
|
|
|
|
Copyright (C) 2016-2016 Johannes Bauer
|
|
|
|
|
|
|
|
|
|
This file is part of luksrku.
|
|
|
|
|
|
|
|
|
|
luksrku is free software; you can redistribute it and/or modify
|
|
|
|
|
it under the terms of the GNU General Public License as published by
|
|
|
|
|
the Free Software Foundation; this program is ONLY licensed under
|
|
|
|
|
version 3 of the License, later versions are explicitly excluded.
|
|
|
|
|
|
|
|
|
|
luksrku is distributed in the hope that it will be useful,
|
|
|
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
|
GNU General Public License for more details.
|
|
|
|
|
|
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
|
|
|
along with luksrku; if not, write to the Free Software
|
|
|
|
|
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
|
|
|
|
|
|
|
|
Johannes Bauer <JohannesBauer@gmx.de>
|
|
|
|
|
*/
|
|
|
|
|
|
2016-09-22 20:40:58 +02:00
|
|
|
#ifndef __GLOBAL_H__
|
|
|
|
|
#define __GLOBAL_H__
|
|
|
|
|
|
|
|
|
|
/* Magic is the prefix of announcement packages. It is the MD5SUM over the
|
|
|
|
|
* CLIENT_PSK_IDENTITY. This only changes when the protocol that is spoken
|
|
|
|
|
* changes. */
|
|
|
|
|
#define CLIENT_PSK_IDENTITY "luksrku v1"
|
|
|
|
|
#define CLIENT_ANNOUNCE_MAGIC { 0x46, 0xf2, 0xf6, 0xc6, 0x63, 0x12, 0x2e, 0x00, 0xa0, 0x8a, 0xae, 0x42, 0x0c, 0x51, 0xf5, 0x65 }
|
|
|
|
|
|
|
|
|
|
/* Size in bytes of the PSK that is used for TLS */
|
|
|
|
|
#define PSK_SIZE_BYTES 32
|
|
|
|
|
|
|
|
|
|
/* How many disks every entry may contain */
|
|
|
|
|
#define MAX_DISKS_PER_HOST 8
|
|
|
|
|
|
|
|
|
|
/* How long a passphrase can be maximally */
|
|
|
|
|
#define MAX_PASSPHRASE_LENGTH 64
|
|
|
|
|
|
|
|
|
|
/* How long in characters a cryptsetup device name mapping may be */
|
|
|
|
|
#define MAX_DEVMAPPER_NAME_LENGTH 63
|
|
|
|
|
|
|
|
|
|
/* In what interval the server should broadcast that it's waiting for unlocking */
|
|
|
|
|
#define WAITING_MESSAGE_BROADCAST_INTERVAL_MILLISECONDS 1000
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
#define BLACKLIST_ENTRY_COUNT 16
|
|
|
|
|
#define BLACKLIST_ENTRY_TIMEOUT_SECS 120
|
|
|
|
|
|
|
|
|
|
/* Scrypt parameters for config file encryption */
|
|
|
|
|
#define SCRYPT_N (1 << 17)
|
|
|
|
|
#define SCRYPT_r 8
|
|
|
|
|
#define SCRYPT_p 1
|
|
|
|
|
|
|
|
|
|
#define staticassert(cond) _Static_assert((cond), #cond)
|
|
|
|
|
|
|
|
|
|
#endif
|
